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A class of anyonic models for universal quantum computation based on weakly-integral anyons 
has been recently proposed. While universal set of gates cannot be obtained in this context by 
anyon braiding alone, designing a certain type of sector charge measurement provides universality. 

In this paper we develop a compilation algorithm to approximate arbitrary n-qutrit unitaries 
with asymptotically efficient circuits over the metaplectic anyon model. One flavor of our algorithm 
produces efficient circuits with upper complexity bound asymptotically in 0(3^" log 1/e) and en¬ 
tanglement cost that is exponential in n. Another flavor of the algorithm produces efficient circuits 
with upper complexity bound in log 1/e) and no additional entanglement cost. 


I. INTRODUCTION 

Fault tolerance is becoming a key issue that will de¬ 
fine success or failure of future programmable quantum 
computers. Certain quasiparticles, called non-abelian 
anyons, provide a framework for coherent encoding of 
quantum information that will require little or no error 
correction. 

Our primary goal is to propose an algorithm for ef¬ 
ficient circuit synthesis (compilation) in one such non- 
abelian framework. 

Braiding non-abelian objects such as anyons and zero- 
energy modes is the standard gate operation for topo¬ 
logical quantum computation [7, 12]. But any physically 
realistic quantum operations are good for quantum infor¬ 
mation processing. Besides braiding, measurement is a 
natural primitive for quantum computation. While mea¬ 
surements in the quantum circuit model in the computa¬ 
tional basis can always be postponed to the end, this can¬ 
not be done in topological quantum computation. There¬ 
fore, we could gain extra computational power by sup¬ 
plementing braiding with measurements. One physically 
realistic measurement in topological quantum computa¬ 
tion is to measure the total charge of a group of anyons, 
which can be done by either projective measurement or 
interferometric measurement. 

In [5] , we pursue a qutrit generalization of the standard 
quantum circuit model. Some anyon systems are very 
natural for the implementation of qutrits, e.g. anyons 
with quantum dimension ^/S- One such anyon system is 
SU{ 2 ) 4 —the first of the sequence of metaplectic anyons 
[11]. While braiding alone for SU{ 2)4 is not universal as 
it is the case with the Majorana system, the metaplec¬ 
tic system is no longer like Majorana when measurement 
is added. We proved that for SU{ 2 ) 4 , braiding supple¬ 
mented by projective measurement of the total charge of 
a pair of metapletic anyons is universal for qutrit quan¬ 
tum computation (see [5]). 

Our motivation for weakly-integral anyon framework 
is potential realization of metaplectic anyons and zero 
modes in physical systems. Majoranas are closer to be 
well-controlled, but their computational power is im¬ 


pacted by the high complexity and cost of a universal 
basis [18]. Metaplectic models strike the right balance 
between controllability and universality. There is some 
recent numerical evidence that SU( 2)4 might be realized 
in the = | fractional quantum Hall liquid (see [16]). 
There is also recent research potentially leading to prac¬ 
tical recipes for synthesizing and braiding parafermionic 
zero modes in fractional quantum Hall liquids pared with 
s-wave superconductors (see [4]). These are essentially 
recipes generalizing the synthesis of Majorana zero modes 
in the same general set up. In particular it is theoreti¬ 
cally feasible that a species of Z 4 -parafermion zero modes 
exhibiting SU{ 2)4 statistics can be realized along these 
lines (ibid.). Therefore, SU{ 2)4 is a promising viable 
path to universal topological quantum computation. 

In this paper we build upon the metaplectic model def¬ 
inition ([5]) and develop algorithms for effective synthesis 
of efficient n-qutrit circuits over the model. Given a uni¬ 
tary target gate U and an arbitrary small target precision 
e > 0 a circuit approximating U to precision e is consid¬ 
ered efficient if the number of primitive gates in that 
circuit is asymptotically proportional to log 1/e. An al¬ 
gorithm for synthesis of such efficient circuit is considered 
effective if it can be completed on a classical computer 
in expected runtime that is polynomial in log 1/e. 

We develop two flavors of an effective general synthe¬ 
sis algorithm. The first flavor makes a distinction be¬ 
tween the parameter approximation cost and entangle¬ 
ment cost in an efficient circuit and produces such cir¬ 
cuits with upper complexity bound in 0(3^" (logg 1/e -b 
2 n-|-log(log(l/e))))-|-0((9 (2-|--\/5))"). The second flavor 
makes no such distinction and produces efficient circuits 
with upper complexity bound in 0(n3^" (logg l/e-|-2n-|- 
log(log(l/e)))). While the first flavor of our algorithm 
is clearly asymptotically superior when n is fixed and 
e —>■ 0, there is obviously a practical tradeoff threshold 
between the two flavors when e is fixed and n is growing. 
Leading terms of our upper bounds for both complexities 
are expressed in terms of specific leading coefficients, not 
merely in the big O terms. 

The technique for the algorithm is number-theoretic in 
nature. For any range of practically interesting precisions 
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the circuits produced by our algorithms are significantly 
more efficient (both in the asymptotical and practical 
sense) than any hypothetical circuits obtainable by the 
Dawson-Neilsen version of Solovay-Kitaev algorithm (c.f. 
[ 6 ]). Our algorithm designs are more broadly applicable 
to other classes of weakly-integral anyons involving the 
quantum dimension of y/S. 

The paper is organized as follows: in section II we 
make a very brief introduction into fundamental proper¬ 
ties of metaplectic anyons, basic encodings and quantum 
gates; in section III the core circuit synthesis tools are 
developed, which are meant to reduce Householder re¬ 
flections to axial reflections, and axial reflections are then 
described as metaplectic circuits in section IV. In section 
V and VI two approaches to synthesizing approximation 
circuits for arbitrary unitaries are introduced and com¬ 
pared, then the top level overview of the synthesis flow 
is given in section VII. Section VIII concludes the paper 
with some open problems and future work directions. 


II. FUSION, BRAIDING, AND BASIC GATES 

For completeness and readability we start with a very 
brief introduction into the concepts of braiding and fu¬ 
sion, focussing narrowly on the mathematical and logical 
side of these concepts. For a more broad exposure the 
reader is encouraged to look up the available tutorials on 
the subject such as [1], [12],[17]. 

A. Background on fusion and braiding of 
non-Abelian anyons 

Anyons are quasiparticles described by a certain Topo¬ 
logical quantum field theory (TQFT), and, axiomati- 
cally such theory allows for a finite number of anyon 
species that have distinct values {a, /3, 7 ,...} of topo¬ 
logical charge. For example, one of the simplest theories 
leads to Fibonacci anyons that allows only two values 
of charge, 1 and r, where r is the charge of a non-trivial 
anyon and 1 is the charge of “no-anyon” or vacuum ([17]). 

Given an ensemble of anyons (oi, 02 ,..., fln) the struc¬ 
ture of their collective state space H depends on the un¬ 
derlying theory. If we measured collective topological 
charge of some subsequence of anyons in the ensemble, 
say (oi,..., Oj), 1 < i < j < n, the charge would prob¬ 
abilistically assume some value c G {a, /3, 7 ,...}. After 
this is done, the state space of the ensemble is reduced 
to some smaller subspace C H. This is the phe¬ 

nomenon known as fusion and the resulting topological 
charge is often called the fusion charge. 

Once we have measured out the fusion charge of several 
subsequences, we may end up with a one-dimensional 
state space, or, up to a global phase, with one specific 
state. This state can be characterized by the collection of 
measurement outcomes, and it is an established practice 
to represent such collection as a tree, called fusion tree. 



Figure 1: A fusion tree for anyonic quartet. The left 
pair of anyons has the fusion charge C 12 , the right pair 
has the charge of C34 and the overall charge of the 
quartet is C14. 

As a segway into the next subsection consider the fol¬ 
lowing 

Example 1. Theory of metaplectic anyons allows five 
values of topological charge: {1,Z,X,X',Y}. Con¬ 
sider a quartet of anyons of type X, i.e. an ensemble 
(oi, a2, 03, 04) where each anyon Oi has the charge of X. 
Let us measure the charge C 12 of the pair ( 04 , 02 ), then 
the charge C34 the pair (03,04) and then the charge C14 
of the entire quartet. This sequence of measurement is 
represented by the tree shown in figure 1. 

Possible outcomes of fusion charge measurement are 
dictated by a set of fusion rules. 

A fusion rule has the following synthax: 

a(g)b^^Nf^c 

C 

Here the left hand side stands for fusion of two systems 
with topological charges a and b. The J2c right 

is a disjunction indexed by all possible outcomes (c) of 
fusing of the two systems. is the multiplicity of the 
corresponding outcome c. Its meaning being: if a pair 
of anyons of type a and b happened to have fused to the 
charge c then their collective state space have reduced to 
an {,-dimensional Hilbert space. 

Example 2. ^ The following three rules are among the 
fusion rules of the metaplectic anyon theory: 

Vc G {l,Z,V,V',r}, cG 1 = l(g)c = c (1) 


^ Incomplete set of rules is sufficient for our purposes. 
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A®A = I +Y 

( 2 ) 

Y^Y = 1 +Z +Y 

(3) 


To simplify the matters, we allow only multiplicities 
of 1 below. Suppose (oi, 02 ,...,a„) is an ensemble of 
anyons and a sequence of topological charge measure¬ 
ments has been selected that defines a certain fusion tree 
structure. Then the number of distinct fusion trees that 
are allowed by the fusion rules is precisely the dimension 
of the Hilbert state space H of the ensemble, and there 
exists a basis in H whose elements are labeled by those 
distinct fusion trees. We will describe a basis like this in 
the beginning of the next subsection. 

While fusion bases are suitable for encoding the quan¬ 
tum information, natively topologically protected gates 
on such encodings can be derived from braiding of non- 
Abelian anyons. Quite simply, braiding is either an ex¬ 
change of two distinct anyons in an ensemble or moving 
a single anyon along a complete closed loop. In gen¬ 
eral, braiding causes a non-trivial unitary action on the 
state space. By definition of ”non-Abelian” these actions 
caused by different exchanges do not have to commute 
and the corresponding sets of unitary operators are not 
simultaneously diagonalizable. This creates the opportu¬ 
nity for building interesting and useful groups of unitary 
gates from braiding operations. Such groups are not al¬ 
ways universal for quantum computation. Braiding hap¬ 
pens to be universal in case of Fibonacci anyons ([7]), 
and in the case of metaplectic anyons below universality 
can be achieved with a little help from measurement. 


B. Metaplectic basis and metaplectic circuits 

Metaplectic anyon model is defined in [5] as an ide¬ 
alized multi-qutrit model, where each qutrit is en¬ 
coded using a specific quartet of SU{ 2)4 anyons and 
thus an n-qutrit quantum register is encoded using 4n 
anyons. The model allows five values of topological 
charge {1, Z, X, X',Y} and the relevant subset of fusion 
rules has been already listed in example 2. We encode 
a standard qutrit using a quartet of anyons of type X 
prepared such that their joint topological charge is Y. 
The corresponding basis states can be labeled by fusion 
trees such as shown on Fig. 1 with the C 14 = Y con¬ 
straint. It follows from the fusion rules that ( 012 , 034 ) € 
{(1,Y),(Y,1),(Y,Y)}. 

One can do similar analysis on the state space 77 of 8 
anyons of type X prepared such that their overall topo¬ 
logical charge is Y. The possible charges that label a 
basis in H are shown on Fig. 2. Under the constraint 
0 i 4 = 058 = Y the system is reduced to a state in a 9- 
dimensional subspace 77' C 77 with an obvious ad hoc 
isomorphism of this subspace and 773 ® where H 3 
is the state space of the standard qutrit. We use 77' 
to encode a standard two-qutrit register and call it the 



Figure 2: A fusion tree for 8 anyons. The overall 
charge assumed to be Y. There are six fusion charges 
defining specific fused state. 


computational subspace. It is not difficult to compute 
the dimension of 77. As per fusion rules (1,2,3) and by 
combinatorial enumeration, dim 77 = 21. Thus 77' is a 
proper subspace of co-dimension 12. 

This analysis generalizes in a natural way to multi- 
qutrit encodings with more than two qutrits. 

One should be cognizant that braiding of anyons from 
quartets encoding different qutrits (cf. Fig. 2) does not, 
in general, preserve the computational subspace, there¬ 
fore we should only be deriving the multi-qutrit gates 
from the subgroup of braids that do preserve 77'. 

The actual derivation of primitive gates is beyond the 
scope of this paper. Below we summarize the designs 
developed in [5]. 

Consider the one-qutrit fusion basis 
{|1, F), |y, 1), |y, F)} introduced in the beginning 
of this subsection and relabel it as {|0) = — |F, F), |1) = 
|1,F), |2) = |F, 1)} (the minus sign leads to nicer 
algebra). 

Introduce uj = and 7 = 

Braiding of the anyons constituting a qutrit amounts 
to a finite-image representation of the braid group 7^4 
where the generators of B 4 are represented by the fol¬ 
lowing unitaries in the above basis: 

CTj = 7 diag(l, w, 1 ), 0-3 = 7 diag{l, 1 , uj), 

( 1 UJ uj\ 
w 1 w 

UJ UJ I I 

We observe that, up to global phase, cti is equiv¬ 
alent to the Qi = diag{l,uj,l) , 0-3 is equivalent to 
Q 2 = diag{l, l,a;) and 172 is equivalent to the S 2 . 

For completeness we also need classical transpositions 
of the qutrit basis. 

By direct computation. Top = 7 (173 cr 2 ^■ 3 )^; = 

i (i7i (72 <7i)^ where Tjp, is the \j) O \k) transposition. 

Obviously Top, Top generate a faithful representation 
of the symmetric group S 3 on the qutrit and in particular, 
in terms of notations of [5] we have Qo = Top <JiTq i = 
To,2 crs tJ 2; INC = Top Top; INC^ = Top Top. 
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In the two-qutrit encoding explained above there is a 
certain braid explicitly composed out of 92 anyon ex¬ 
changes that preserves the computational subspace and, 
in the \j) ^\k), j,k = 0,1,2 basis implements the follow¬ 
ing entangler: 

SUM|j, k) = \j, {j + k) mod 3) 

which is a natural qutrit generalization of the CNOT. 

It turns out that the gates designed above are not suf¬ 
ficient for the universal quantum computation, as per [ 8 ]. 
They are known to generate a finite group that is projec- 
tively equivalent to the two-qutrit Clifford group. 

However the reflection gate ^ 

R\ 2 ) = diag{l,l,-l) 

is outside the Clifford group and thus provides universal¬ 
ity when added to the above gates. 

The other two single-qutrit axial reflection oper¬ 
ators are classically equivalent to R\ 2 )' R\o) = 

7‘o,2 .R| 2 > ^ 0 , 2 ;-^| 1 > = '^ 0 , 1 -R| 0 > Tq,!- We collectively call 
these reflections the R-gates. 

An i?-gate is implemented exactly via a certain 
measurement-assisted repeat-until-success circuit with 
two ancillary qutrits, as described in [5], Lemma 5. The 
circuit performs a probabilistic protocol that succeeds in 
3 iterations on average (with the variance of the itera¬ 
tions to success equal to 6 ). This is the most expensive 
protocol in our set so far and for the purposes of re¬ 
source estimation, we take the following 

Assumption. The cost of performing any braiding-only 
(generalized Clifford) gate, including the SUM is trivial 
compared to the cost of performing an i?-gate. 

Therefore we will be using the R-count as the measure 
of the cost of a quantum circuit. 

Definition 3. A circuit composed of unitary gates in¬ 
troduced in this section is called a metaplectic circuit. 

The i?-count of a metaplectic circuit is the minimal 
number of i?-gates in all equivalent representations of 
the circuit. 

All the generators of metaplectic circuits are defined 
by matrices that are populated with algebraic numbers, 
and it follows from [ 2 ] that the generator set is efficiently 
universal, meaning that for any target unitary operator G 
and small enough desired approximation precision e there 
exists a circuit of depth in 0 (log(l/e)) that approximates 
G to precision < e. 

The main purpose of this paper is to develop actual 
classically feasible algorithm for finding such efficient ap¬ 
proximating circuits. 


^ also called Flip[2] gate elsewhere 

® Although not nearly as expensive as a magic state distillation 


C. Useful additional gates. 

Here we expand the metaplectic basis defined in section 
HB with additional useful gates. 

1) P gates. 

P, =I-{uj^ + l)\j){j\ = Rij)Q],j = 0 , 1,2 

By design a P gate has the i?-count of 1. Any odd 
power of a P gate also has the P-count of 1 while an 
even power of a P gate has P-count of 0. 

Here is a useful observation regarding the cost of P 
gate sequences: 

Observation 4. Any gate in the group generated by 
{Po,Pi,P 2 } can be effectively represented as a product 
of the global phase in {±1} and a circuit of the R-count 
of at most 1. 

Proof. Clearly diag{—l, —1, —1) is identity up to the 
global phase of (—1) and has the P-count of 0. Sim¬ 
ilarly each of the gates /oi = diag{—l,—l,l), fo 2 = 
diag{—1,1, —1), f 12 = diag{l, —1, —1) is an P gate up 
to the global phase of (—1) and has the P-count of 1. 

Now, any gate in the group generated by {Pq, Pi, P 2 } 
is of the form diag{{—(jj‘^)‘^°, = 

diag{{-l)'^°,{-iy\{-lY^) x diag{uj^'^« 

The second factor in this product has the P-count of 0 
by convention and the first factor is either ±/ or one of 
the P gates or one of the /oi, / 02 , /12 gates and has the 
P-count of at most 1. □ 

2) SWAP gate. 

While it is intuitively clear that the two-qutrit SWAP 
gate can be performed by pure braiding, a direct compu¬ 
tation leads to the following 

Observation 5. SWAP = 

(ri,2 O I)SUMi^ 2 SUM 2 ,iSUM 2 pSUMi ^2 

Here ri ^2 is the single-qutrit transposition |1) o |2) 
(that can be expressed through already available trans¬ 
positions as Ty 2 = To, 2 'ro.lTo, 2 )- 

By the usual notation convention here and everywhere 
the SUMj^fe in multi-qutrit context is a shorthand for the 
two-qutrit sum gate applied to j-th qutrit as the control 
and fc-th qutrit as the target (tensored with the identity 
gates on all other qutrits). 

3) Axial reflection. 

The following is key for our circuit synthesis: 

Definition 6. Consider an integer n > 1 and let \j),j = 
0,..., 3” — 1 be an element of standard n-qutrit basis. 

The operator P|j) = J®” — 2 \j){j\ is called an n-qutrit 
axial reflection (operator). 

Clearly it is indeed a reflection w.r.t. the hyperplane 
orthogonal to |j). 
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III. EXACT SINGLE-QUTRIT AND 
APPROXIMATE TWO-LEVEL STATES. 

Consider the field of Eisenstein rationals Q(w) which 
is a quadratic extension of Q. Z[a;] is its integers ring 
called the ring of Eisenstein integers. Z[a;] has the group 
of units isomorphic to Zg generated by —uP' = 1 + uj. 

The two core tools needed for effective synthesis of 
metaplectic circuits are described in Lemmas 7 and 12 
below. 

Lemma 7 (” Short column lemma”). Consider a unitary 

single-qutrit state \p) = (u | 0 )+u |l)+r(; | 2 ))/v^^ where 
u,v,w G Z[a;]; L G Z. 

1) There is an effectively synthesizable metaplectic cir¬ 
cuit c with the R-count at most L + 1 such that clijj) G 
{| 0 ),| 1 ),| 2 )}. 

£J The classical cost of finding such a circuit is linear 
in L. 

Before proving the lemma, we need to handle one spe¬ 
cial case and make one algebraic observation. 

Lemma 8 (Special case.). If\'tp) is a unitary state the co¬ 
efficients of which in computational basis are Eisenstein 
integers, then 

1) One and only one coefficient is non-zero; 

2) This non-zero coefficient is an Eisenstein integer 
unit; 

3) IV') can be reduced to one of the computational basis 
states using at most one P gate. 

Proof. If tjjQ,... jipN are the coefficients, then 
= 1. Since for any j , is a non¬ 
negative integer, all the coefficients, except one, some 

ipj^, must be zeros, while = 1 and hence 

is a unit in Z[a;]. Therefore and 

® = 1. Hence it is easy to find a P gate 

of the form G = J O ... Pfi'^ ® ... 0 / such that G\fi) 
is a standard basis vector. □ 

Let us introduce the finite ring Z 3 [a;] = Z[a;]/(3Z[a;]). 
This is a ring with exactly nine elements 

'[ 0 ,l, 2 ,cc, 2 cu,l -\- to, \ -t- 2 cu ,2 -t-cu, 2 -t- 2 cu}. 

Let p : Z[a;] -G Zslco] be the natural epimorphism. 
By construction, its kernel consists of elements that are 
divisible by 3. 

Both the complex conjugation * : Z[a;] —>■ Z[a;] and the 
norm map | ^ : Z[cli] —>■ Z can be consistently factored 

down to the morphism S : Z 3 [w] Z 3 [w] and the reduced 
norm map | * p : Z 3 [a;] —?> Z 3 (since both p* and | * p 
mod 3 annihilate the kernel of p). 

For the benefit of several future constructions we need 
to analyze the action of the group of Eisenstein units 
EC = {—on Z 3 [u;]. 

Observation 9. Z 3 [a;] is split into three orbits under the 
action of the group EU as follows: 

0) The one-element orbit Oq o/O; Note that |0p = 0 


1) The six-element orbit Oi of 1; Note that for any 
z G Oi, |zp = 1 mod 3. 

2) The two-element orbit O 2 0 / 1 -I- 2 to; Note that for 
any z G O 2 , l^p = 0 mod 3. 

This split is established by direct computations. 

Proof. (Of the’’Short column lemma”). We will be prov¬ 
ing the lemma by induction on L. For L = 0 the claim 
follows from the lemma 8 . 

Consider a state with denominator exponent L > 0. 

Note that \/^ = 1 -|- 2 to and thus it is an Eisenstein 
integer. It follows, of course that 3 = —(1 -I- 2a;)^ and 
thus 3 is divisible by both 1 -|- 2 w and (1 -|- 2a;)^ in Z[w]. 

The state \tp) is immediately reducible to a state of the 
form |0) -I- v' |1) -|- w' |2)) if each of u, v, w 

is divisible by 1 -I- 2 a; and it is immediately reducible to 
a state of the form ^{u" |0) -I- v" |1) -I- w" |2)) if 

each of u,v,w is divisible by 3 in Z[w]. 

From the unitariness condition on \ip) we have jup -I- 
\v\^ -H |wp = 3^. Given L > 0, then 3^ mod 3 = 0 
and thus (|up mod3)-|-(|up mod 3)-I-(|u;p mod 3) = 
0. By direct computation we check, however, that for 
any z G Z[a;], |zp mod 3 is either 0 or 1. By simple 
exclusion argument for (jup mod 3) -|- (|up mod 3) -I- 
(jwp mod 3) = 0 to hold, either all the summands must 
be 0 or all the summands must be 1 . 

Let us distinguish the two cases. 

Case 0: (|up mod 3) = (|up mod 3) = (|rcp 
mod 3) = 0 

As per the above observation 9 the residues 
p(u),p(v), p{w) belong to the union of orbits Og and O 2 . 

In the edge case when all three belong to the orbit Og , 
each of the u, v, w is divisible by 3. As per earlier remark, 
Ifo) is reducible to the case of denominator exponent L—2 
and we do not need to apply any gates for this reduction. 

More generally within the case 0 each of the residues 
p(u), p(v), p{w) is divisible by p(I-|-2a;). However if p{z) 
is divisible by p{l-\- 2 tj) then z is divisible by 1 - 1-2 w in the 
Z[a;]. Indeed , the divisibility of the residue implies that 
z = (1 -I- 2a;) z' -I- 3z", z',z" G Z[a;], but, as we noted, 
3 is divisible by 1 -I- 2 a; in the Z[a;]. Thus the general 
subcase allows reduction to the denominator exponent 
L — 1 without application of any gates. 

Case 1 : (|up mod 3) = (|up mod 3) = ([rcp 
mod 3) = 1. 

We are going to find a short circuit cl of i?-count at 
most 1 such that cl I'p) is reduced to a case with denom¬ 
inator exponent at most L—1. (This would complete the 
induction step.) 

Suppose first that p{v) = p{w) = uo'^ p{u) G Z 3 [a;], 
which means that v = uP u -\- Zv', w = 10 "^ u -\- 2 i w' for 
some v’,w’ G Z[uo] and it follows that S 2 \'<lo) = (—(u -I- 
tov' -Glow') |0) — (u'-I-o;w') |1) —(a;u'-|-r(;') \2)))/p—‘i^ ^. 

Thus, in this particular special case the denominator 
exponent is reduced to L — 1 by application of the single 
S 2 gate that has A-count 0 . 
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In general, since (|a;^Mp mod 3) = (|up 

mod 3) = (|z;p mod 3) = (|wp mod 3) = 1, then 
uP'p(u), p(v), p{w) must belong to the same orbit 
Oi of the unit group EU. This means, in particu¬ 
lar we can effectively find integers dy,dw such that 
uj'^ p{u) = p((—u) = p((—w) = r G 
Hence the short circuit Cl = S 2 Pi'’ -pf” reduces the 
state as shown . As per the observation 4, Pi” P^'” in 
this circuit is equivalent to a circuit of i?-count at most 
1 up to the possible global phase of ±1. 

This completes the induction step. 

□ 

Example 10. Consider unitary column \K) = ((2-|- 
*V3)|0) + |l) + |2))/3. 

\K) is reduced to basis state at R-count of 2 as follows: 

S2 RjO) Ql Q 2 -R|0> \K) = |0) 

Note that 

S2 R\q) Ql Ql S2 R\q) = -w cr2 I?|o) 0-1 0-3 ^2 I?|o> ■ 

Below we present the method suggested by the lemma 
7 in algorithmic format 


Algorithm 1 Reduction of a short unitary column 

Require: L G Z, u,v,w G Z[uj] 

1: ret G- (empty) 

2: while L > 0 do 

3: {iyu,i>v,i 2 w} = {\u\'^,\v\'^,\w\'^} mod 3 

4: if i/u = vv = vw = 1 then 

5: Find duj G {—2, —1,0,1, 2,3} such that 

6: uj"^ u = V = w mod 3 

7: {u,V,w} 

8 : v' <— (v — uP u)/3; w' ^ {w — iP u)/3 

9: {u, V, w} <— 

10: { — {u + OJV' -\- UJ w'),—{v' + OJW'), —{UJV' + 

w’)) 

11: ret G- S 2 pY P^™ ’’fit 

12: else 

13: {u, u, w} •<—{u, u, r(;}/(2a;-f 1) 

14: end if 

15: L ^ L - I 

16: end while 

17: Implied L = 0; Only one of u, v, w is non-zero. 

18: Find classical g s. t. g{u\0) + u|l) -I- w\2)) = m'|0) 

19: Find d G {-2,-1, 0,1,2, 3} such that {—uj'^Y = 

20: return Pq‘^ g ret 


Lemma 11. Consider a ”two-level” unitary single-qutrit 
state \(p) = X |0) -I- y |1) -I- z |2) where xy z = 0 and let e 
be an arbitrarily small positive number. 

1) There is a family of effectively synthesizable states 

of the form IV’e) = (we |0) -f |1) We 12))/^/^^"; 
Ue,Ve,We G Z[uj]; Lg G Z such that ji/fe) is an 
e-approximation of \p) and Lg < A log3(l/e) -I- 
0(log(log(l/e))). 

2) The expected average classical cost of finding each 
\%fg) is polynomial in log(l/e). 


A proof of this lemma is found in Appendix B. The 
proof is very technical. It combines elementary geometry 
with rather profound number theory, which is based on 
a mild number-theoretical hypothesis (conjecture 29). 

It follows from the two lemmas that a two-level unitary 
state can be prepared with precision e from a standard 
basis state using a metaplectic circuit of i?-count at most 
4 log3(l/e) -I- 0(log(log(l/£))) and in fact this readily 
generalizes to multiple qutrits as follows: 

Lemma 12 (”Two-level approximation lemma”). Con¬ 
sider an integer n > 1 and let \lp) he a unitary n-qutrit 
state that has at most two non-zero components in the 
standard n-qutrit basis. 

For arbitrarily small £ > 0 

1) There is an effectively synthesizable metaplec¬ 
tic circuit c with the R-count at most 4 log3(l/£) -I- 
0(log(log(l/£))) such that c|0) is an e-approximation of 

\t)- 

2) The expected average classical cost of finding such a 
circuit is polynomial in log(l/£). 

Before proving the lemma we need two lesser technical 
facts that are useful in their own right: 

Lemma 13. Let |5i) and [62) be two standard n-qutrit 
basis states. There exists an effectively and exactly rep¬ 
resentable classical permutation tt such that I&2) = |6i) 

Proof. In the case of n = 1 the Z3 group generated by 
INC acts transitively on the standard basis {10), |1), |2)}. 

Consider \bk) = \ {bk)i, ■ ■ ■, {bQP, n > 1, /c = 1,2. Let 
TTj G {/,INC,INC^} be such that TTj\{bi)j) = \{b 2 )j),j = 

l,...,n. 

Then tt = is the desired permutation. □ 

Lemma 14. 1) For any two standard n-qutrit basis vec¬ 
tors \j) and \k) there exists a classical effectively repre¬ 
sentable metaplectic gate g, such that for \ j') = g\j) and 
\k') = g\k) we have \j' — k'\ <3. 

2) Such a gate g can be effectively represented with 
at most {n — 1) instances of the SUM, SUM^ or SWAP 
gates. 

In other words, digital representations of j' and k' base 
3 are the same except possibly for the least-significant 
base-3 digit. 

Proof. At n = 1 there is nothing to prove. 

Given Lemma 13, for n = 2 the general pair of ba¬ 
sis vectors can be reduced to the case where |j) = 
|00). When \k) = |0,A;i) no further transformations 
are needed, when |fc) = |/coj0) a single SWAP suf¬ 
fices. The remaining cases are covered by SUMJ ^|11) = 

SUM2,i|21) = |01), SUM2,i|12) = SUMJ_i|22) == |02). 

Suppose n > 2 and the lemma has been proven for 
multi-qutrit vectors in fewer than n qutrits. 

Let |j) = \ji ..., j„-i, j„), |fc) = \ki ...,A:„_i,fc„) be 
base-3 representations of the two vectors. 
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By induction hypothesis, one can effectively find 
(n — l)-qutrit classical metaplectic gate gn-i such that 
(g„_l (g) J)|jl \ ^nd (^n-l 0 

I)\ki kn^i,kn) = I ..., /c^) may differ only at 

(n — l)-st and n-th position. 

Select a two-qutrit classical gate 32 , as shown above, 
such that g 2 \jn-iijn) and g 2 \k'„_i, k'^) differ only in the 
last position. Then, by setting g = (g)^ 2 )( 5 Tt-i® 

I) we complete the induction step. 

□ 

Proof. (Of the two-level state approximation lemma.) 
We start by reducing |(/?) to the form x\a\... a„_i, d) + 
0 |ai ...a„_i,/), ai,...,a„_i,d, / G {0,1,2} using a 
classical circuit b described in Lemma 14. Let e G 
{0,1,2} be the ’’missing” digit such that {d, e,/} is a 
permutation of {0,1, 2}. 

Using Lemma 11 we can effectively approximate the 
single-qutrit state x\d) + z\f) by an Eisenstein state of 

the form \rj) = {u |d) + v\e) + w \f))l'/-^ ,u,v,w G 
Z[uj],k G Z to precision e with k < 4 log 3 (l/£) -|- 
0 (log(log(l/£))). 

Using Lemma 7 we can effectively synthesize a single- 
qutrit metaplectic circuit ci with i?-count at most fc -|- 1 
such that Cl | 0 ) = \r]). 

Let Cn = (/»(”-1) g) Cl). 

Clearly Cn \ ai...a„_i, 0 ) is an £-approximation of 
Iv?). But |ai ... a„_i, 0) can be prepared exactly from |0) 
using at most n — 1 local INC gates, which finalizes the 
desired circuit. □ 

Corollary 15. Consider an integer n > 1 and let \lp) 
be a unitary n-qutrit state that has at most two non-zero 
components in the standard n-qutrit basis and consider 
the corresponding Householder reflection operator = 

/®"- 2 |(^)(^|. 

For arbitrarily small e > 0 

1) There is an effectively synthesizable metaplec¬ 
tic circuit c with the R-count at most 4 log 3 (l/£) -I- 
0 (log(log(l/£))) such that ci?|g^ c^ is a e-approximation 
of R\^y (Where |0) = |0)®".; 

2) The expected average classical cost of finding such a 
circuit is polynomial in log(l/e). 

Proof. As per [13], if the distance between state \ip) and 
\fi) is less than ej (2 \fT) , then the distance between 
and R\y) is less than e. Using Lemma 12 one can ef¬ 
fectively find a metaplectic circuit c with the i?-count 
in 4 log 3 (l/£) -I- 0(log(log(l/£))) such that cjO) approx¬ 
imates \ip) to precision and the corollary fol¬ 
lows. □ 

This result applies in a straightforward manner to one- 
parameter special diagonal unitary: 

Corollary 16. Consider an integer n > 1 and an n- 
qutrit diagonal operator of the form D = 7®" -j- (e^^ — 
1) l7)(j| + (e"*®-l) \k}{k\ where j,k G {0,..., 3"-l}, j ^ 

k. 


For arbitrarily small £ > 0 there is an effectively syn¬ 
thesizable circuit at distance < e from D composed out of 
at most two axial n-qutrit reflection operators and local 
metaplectic gates with the total R-count of 

1) at most 8 log 3 (l/£) -I- 0(log(log(l/£))) when n = 1, 
and 

2 ) at most 16 log 3 (l/£)-|- 0 (log(log(l/£))) when n> \. 

Indeed, the diagonal unitary of this form is equal to 
rira where ri = /®” - |j)(j| - |fc)(fc| -b |j)(fc| -b |fc)(}|, 
r2 = /®” - |j)(j| - |fc)(fc| -b e-'-^\j){k\ -b e*® |fc)(j| and 
both ri and £2 are two-level reflection operators. We note 
that for n = 1 the ri is a Clifford gate and has trivial 
cost. 

Since mult-qutrit axial reflection are going to grow in 
importance below, we offer a decomposition method for 
them in the next section. 


IV. IMPLEMENTATION OF AXIAL 
REFLECTION OPERATORS 

Let 16) be a standard n-qutrit basis state. 

Then an axial reflection operator i?|b) is defined as 

i?|b) = J®"-2|6)(6| 

Clearly, is represented by a diagonal matrix that 
has a —1 on the diagonal in the position corresponding 
to \b) and -bl in all other positions. 

As per Lemma 13 any two axial reflection operators are 
equivalent by conjugation with an effectively and exactly 
representable classical permutation. Since we consider 
the cost of classical permutations to be negligible com¬ 
pared to the cost of the R gates, we hold that for a fixed n 
all the n-qutrit axial reflection operators have essentially 
the same cost. 

We are going to show in this section that all the n- 
qutrit axial reflection operators can be effectively and 
exactly represented. 

In view of the above if suffices to represent just one 
such operator for each n. We start with somewhat special 
case of n = 2 . 

Observation 17. The circuit 

{I (g) R\o)) SUM{I (gi R\y) SUM{R\2) <g R\2)) SUM 

is an exact representation o/(—l)i?| 2 o) 

This is established by direct matrix computation. 

We are going to generalize this solution to arbitrary 
n > 2 and note that the occurrence of the global phase 
(— 1 ) is exceptional and happens only at n = 2 . 

Lemma 18. Given n > 2 , denote by 2 in the context of 
this lemma a string of n — 2 occurrences of 2. 

Then the circuit 

C202 = 

(/ g) i?|02>)-S'[/Mi,2(/ g) / g) i?|2>)(^ «) R\12)) 
SUMi^ 2 SWAPiy {I(gR\22)) SWAPiy {I(gR\22)) SUMi^2 

is an exact representation of the operator R\ 202 )- 


Proof. Let | 6 ) be an element of the standard n-qutrit ba¬ 
sis. The circuit consists of diagonal operators and three 
occurrences of SUMi^ 2 - Let \b 1 b 2 b) be the ternary rep¬ 
resentation of \b) where b stands for the substring of the 
n — 2 least significant ternary digits of b. It is almost 
immediate that the circuit C 202 represents a diagonal uni¬ 
tary. Indeed, when the input is \b 1 b 2 b) we can only get 
±|&i 62 ^), ± 1^1 INC& 2 &) or ±| 6 i INC^& 26 ), up to swap, af¬ 
ter applying each subsequent operator of the circuit, and 
clearly we can only get (p\bib 2 b), = ±1 after the entire 
circuit is applied. 

The lemma claims that (/? = —! if and only if 6 = 202. 

Consider the cases when 61 = 0 or 61 = 1. It is easy to 
see that, whatever is the value of & 2 , one and only one of 
the operators {I® R\q 2 ))^ {I® R\i 2 ))^ {I® R\ 22 )) activates 
i?| 2 ) on \b) and this activation always cancels out with 
(J(g) J 0 .R| 2 )) (since R^ = identity for any reflection R). 
So the result is identity. 

If 61 = 2, 62 7 ^ 0 the five rightmost operations of the 
circuit produce | 2 )(g)(INC^| 62 ))C)(I?| 2 ) |(())j an action that 
is subsequently canceled out by / 0 J 0 i?| 2 ) • K is also 
easy to see that for 62 = I or 62 = 2 the remaining 
two reflections i?|o 2 > uud I?|i 2 ) amount to non-operations. 
Therefore the net result is identity. 

We are left with the important case of 61 = 2, 62 = 0. 

By definition, SUM 12 I 2 O 6 ) = |226) and then the subse¬ 
quence SWAPi ^2 iI^R\ 22 )) SWAPi _2 (L®i?| 22 )) activates 
operator i?| 2 ) on \b) twice, and of course these two acti¬ 
vations cancel each other. 

We proceed with SUMi 2 | 226 ) = | 2 I 6 ), and I 0 R\i 2 ) 
activates the R^ 2 ) on | 6 ) which is immediately cancelled 
out by the I (S> I ^ R\2)- 

Finally SUM 12 I 2 I 6 ) = \20b), and I 0 i?|o 2 ) activates 
i?| 2 ) on 16) as desired. This applies the factor of —1 if 
and only if & = 2 , and that’s what is claimed. 

□ 

Using this lemma we implement the operator i?| 2 o 2 ) 
exactly by linear recursion. 

As we noted earlier, all the axial reflection operators 
in n qutrits have the same i?-count. 

Denote this i?-count by rc(n). 

Observation 19. rc{n) = 0((2 -I- a/S)") when n —>■ 00 . 

Proof. We have rc(I) = I, rc(2) = 4 (see Observation 17). 
The recurrence rc(n) = 4rc(n — 1) -|- rc(n — 2),rp(l) = 
1, rc(2) = 4 can be solved in closed form as rc(n) = ((2 -|- 
v^)” - (2 - V5)")/(2y5). Because |2 - v%| < 1 the 
— (2 — -s/b)" term is asymptotically insignificant. □ 

Thus the cost of the above exact implementation of 
the n-qutrit axial reflection operator is exponential in n. 
This defines several tradeoffs explored in the following 
sections. 


V. ANCILLA-FREE REFLECTION-BASED 
UNIVERSALITY 

Consider integer n > 1. 

For the duration of this section we set V = 3". 

Lemma 20. Given a diagonal unitary D £ U(N) and 
arbitrarily small e > 0 there is an effectively synthesiz- 
able e-approximation of D eomposed of a global phase 
factor, at most 2 (N — 1) axial reflection operators, and 
metaplectic local gates with the total R-count that is 

1 ) 16 (log 3 (l/e)-I- 0 (log(log(l/e)))) when n = 1 and, 

2 ) smaller than 16 (V — l)(log 3 (l/e) + n + 
0 (log(log(l/e)))) when n > 1. 

Indeed, a unitary diagonal D is decomposed into a 
product of a global phase factor and {N — 1) special two- 
level diagonals as in corollary 16. Each of the latter di¬ 
agonals needs to be approximated to precision e/{N — 1) 
with log 3 (l/(e/(V - 1))) < log 3 (l/e) -b n. 

In [21] Jesus Urias offers an effective U{2) parametriza- 
tion of the U{N) group, whereby any U G U{N) is fac¬ 
tored into a product of at most N{N—l)/2 special House¬ 
holder reflections and possibly one diagonal unitary. 

All reflections in that decomposition are two-level. 

This immediately leads to the following 

Theorem 21. (General unitary deeomposition, reflee- 
tion style.) Given a U G U{N) in general position and 
small enough e > 0 the U can be effectively approx¬ 
imated up to a global phase to precision e by ancilla- 
free metaplectic circuit with R-count of at most 4 (N -\- 
4)(V—l)(log 3 (l/e)-|- 2 n-|- 0 (log(log(l/e)))) and at most 
{N -\-4:){N — l)/2 axial reflections (inn qutrits). 

Proof. It follows from [21] that U is effectively decom¬ 
posed into N {N — l)/2 special Householder reflections 
and possibly a diagonal unitary D G U(N) that may add 
up to 2 {N — 1) such reflections (see Lemma 20) to the 
decomposition to a total of (V-|-4)(V— l)/2 reflections. 
Each of these allows an effective s/{{N -b 4)(V — l)/2)- 
approximation by a metaplectic circuit with the i?-count 
of at most 8 (log 3 (l/e) -b 2 n -b 0 (log(log(l/e)) plus at 
most 2 axial reflections as per Corollary 15, and the cost 
bound claimed in the theorem follows. □ 

The best know cost of exact metaplectic implementa¬ 
tion of an n-qutrit axial reflection is in 0((2 -b as 

per Observation 19. This may become prohibitive when 
n is large. 

In the next section we show how to curb the i?-count 
at the cost of roughly doubling the width of the circuits. 

VI. ANCILLA-ASSISTED APPROXIMATION 
OF ARBITRARY UNITARIES 

An alternative way of implementing a two-level uni¬ 
tary operator is through a network of strongly controlled 
gates. 
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For V e U(3) introduce C^(V) € C/(3”+i) where 

f \jl, V\jn+l), jl = • • • = jn = 2 

\|ji, • ■ ■,jn,jn+i), Otherwise. 

The C'^(INC) gate, 


C\mC)\j, k) = \j, {k + 6 ,, 2 ) mod 3) (4) 

is going to be of a particular interest in this context. 
Bullock et Al. [3] offer a certain ancilla-assisted circuit 
that emulates C^{V) using only two-qudit gates. 

The circuit requires n — 1 ancillary qutrits, 4 (n — 1) 
instances of the C'^(INC) gate (see equation (4)) and one 
single C^{V) gate. 

We do not believe that the classical C^(INC) gate can 
be represented exactly and must resort to approximating 
C'^(INC) to desired precision. 

Lemma 22 . C^{INC) (as defined by (4)) can be approxi¬ 
mated to precision e by a metaplectic circuit with R-count 
at most 16 log 3 (l/£) + 0 (log(log(l/£))) and 2 two-qutrit 
axial reflections. 

Proof. C^(INC) is the composition of two reflection op¬ 
erators: C'^(INC) = R\ 2 ) 0 v 2 R\ 2 )<»vo where Vq = (|1) - 
| 2 ))/-\/ 2 , V 2 = (| 0 ) — |l ))/-\/2 and the lemma follows. 

□ 



Figure 3: Parallelizable control flow for the two flavors 
of the main algorithm. 


This synthesis procedure is summarized as pseudocode 
in Algorithm 2 below. 


Corollary 23. Given a V G U(3), integer n > 0 and a 
small enough £ > 0, the C"(C) can he effectively emu¬ 
lated approximately to precision £ by ancilla-assisted 2 n- 
qutrit circuit with R-count smaller than 64 n (log 3 (l/£) -f 
0 (log(log(l/£)))). 

It is easy to see from Lemma 14 that any two-level 
n-qutrit unitary W is effectively classically equivalent to 
some C"“^(VF) where IT is a certain (two-level) single- 
qutrit derivative of W. This applies, in particular, to 
the two-level Householder reflections that constitute the 
factors in the explicit U(2) factorization of t/(3") ([21]). 

An upper bound for the cost of ancilla-assisted emu¬ 
lation of arbitrary n-qutrit unitary is summarized in the 
following 

Theorem 24. (General unitary decomposition, ancilla- 
assisted.) Given a U G U{N) in general position and 
small enough £ > 0 the U can he effectively emulated up 
to a global phase to precision e by metaplectic circuit with 
(n—2) ancillas and R-count smaller than 32 (A^-|-4)(A^ — 
l)(n- l)(log 3 (l/£) -b 2 n-f 0 (log(log(l/£)))). 

Proof. We can still exactly and effectively decompose U 
into a global phase and at most (iV-|-4)(iV—1)/2 two-level 
Householder reflections (see the proof of Thm 21). 

But now we treat each two-level reflection as classical 
equivalent of a C'^~^{V) where T is a single-qutrit uni¬ 
tary. We emulate the each reflection as such using Corol¬ 
lary 23 and the cost bound for the overall decomposition 
follows. □ 


Algorithm 2 Ancilla-assisted decomposition of a general 
unitary. 

Require: U G 17(3"), £ > 0 
l. U = D n^i as per [21] {Diagonal D and two- 
level Uk} 

2 : ret •(— decomposition(Il, £) as per Corol. 23 

3: for k = 1..K do 

4 : cG- decomposition(17fe,£) as per Corol. 23 

5: ret ^ ret c 

6 : end for 
7: return ret 


VII. THE OVERALL SYNTHESIS ALGORITHM 
FLOW. 

Assuming ancillary qutrits are readily available, a de¬ 
cision point on choosing between the ancilla-free and 
ancilla-assisted decomposition strategies is defined by rel¬ 
ative magnitudes of (2 -|- v^)" and 64 n log 3 (l/£). Com¬ 
parison of the upper bounds suggests that in practice the 
ancilla-free solution becomes prohibitively costly when 
n > 7. Otherwise the decision threshold in e is of the 
form £„ = ll(3-(2-HV5)"/(64n))^ 

The two strategies can be run in parallel on a classical 
computer with the best resulting circuit post-selected. 
This approach is shown schematically in Figure 3. 
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VIII. SIMULATION, THEORETICAL LOWER 
BOUND AND FUTURE WORK. 

The scaling of the cost of our metaplectic circuits 
is fully defined by the cost of approximating a two- 
level state. The i?-count of a circuit performing an e- 
approximation of the latter is in its turn defined by the 

denominator exponent k of an approximating tri-level 

_ ^ 

Eisenstein state \(pk) = {u \ j) +v\£)+w |m))/v—3 . . 

We currently have k upper-bounded by 4 log 3 (l/e) -I- 
0 (log(log(l/e))). 

Our numerical simulation over a large set of randomly 
generated two-level targets, demonstrates that an ap¬ 
proximation algorithm based solely on Lemma 11 yields 
k extremely close to this upper bound in overwhelming 
majority of cases. 

A certain volume argument suggests a uniform lower 
bound for k in 5/2 log 3 (l/£:) -I- 0(log(log(l/e))). 
Indeed for a given two-level target state \ijj) 
and its e-approximation \^Pk) the real vector 
[i?e(w),/m(u), i?e(u),/m(u)]^ is found in a certain 
4-dimension meniscus of 4-volume 0(e®3^^). If we 
expect, uniformly, each of these menisci to contain 
0 (log(l/e)) such vectors we need to have e®3^^ in 
0 (log(l/e)) and the above lower bound on k follows. 

There is clearly a gap between our guaranteed cost 
leading term 4 log 3 (l/£) and the cost’ lower bound lead¬ 
ing term 5/2 log 3 (l/e) and we currently do not know 
whether (a) the lower bound is reachable at all using 
metaplectic circuits or, (b) if it is reachable, whether this 
can be done by a classically tractable algorithm. More 
theoretical (and possibly, simulation) work is needed to 
answer these questions. At stake here is potential practi¬ 
cal reduction of the metaplectic circuitry cost by 37.5%. 

Another important open question is whether there is 
a set of exact metaplectic circuits for n-qutrit axial re¬ 
flections with the i?-count that is sub-exponential (pre- 
ferrably, polynomial) in n. 


IX. CONCLUSION 

We have addressed the problem of performing efficient 
quantum computations in a framework where quantum 
information is represented in multi-qutrit encoding by en¬ 
sembles of certain weakly-integral anyons and the native 
quantum gates are represented by braids with a targeted 
use of projective measurement. 

We have developed two flavors of a classically feasible 
algorithm for the synthesis of efficient metaplectic cir¬ 
cuits that approximate arbitrary n-qutrit unitaries to a 
desired precision e. The first flavor of the algorithm pro¬ 
duces circuits that are ancilla-free and asymptotically op¬ 
timal in e (but may have additive entanglement overhead 
that is exponential in n). The second flavor produces 
circuits requiring roughly n clean ancillas, has a depth 
overhead factor of approximately n, but may be, never¬ 
theless, more efficient in practice when n is large. The 
combined algorithm enables us to compile logical multi- 
qutrit circuits with the scalability properties comparable 
to the scalability of the recent crop of efficient logical 
circuits over multi-qubit bases such as Clifford-|-T, Clif- 
ford-|-V or Fibonacci. 

In summary, we have demonstrated that circuit synthe¬ 
sis for a prospective ternary topological quantum com¬ 
puter based on weakly-integral anyons can be done ef¬ 
fectively and efficiently. This implicitly validates such 
prospective computer for the quantum algorithm devel¬ 
opment. 

Although we have achieved asymptotic optimality of 
the resulting circuits, there is some potential slack left in 
the practical bounds of leading coefficients for the circuit 
depths, as explained in the section VIII. Investigating 
this presumed slack is one of our future research topics. 
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Appendix A: Exact Representation of Single-Qutrit 
Unitaries over the Metaplectic Basis 

Surprisingly, our synthesis algorithms did not require a 
usual theorem regarding exact decomposition of exactly 
representable matrices. For completeness we state such 
result here (Thm 26). 

Lemma 25. Let \ip) be a unitary single-qutrit state of the 

form \4>) = |1) -bw |2)) where v,w G Z[(jj],L G 

Z. Then {ip) is effectively and immediately reducible to a 
standard basis vector at the cost of at most one P gate. 

Proof. We reuse remarks in the proof of lemma 7 to note 
that, whenever L > 0 then [up mod 3 = jwp mod 3 = 
0. This also implies that each of the v, w is divisible by 
1 -b 2 a; = in Z[uj]. Therefore, the state reduces 

algebraically to a unitary state of the form u' |1) -b w' |2) 
where v' ,w' G Z[a;] and the lemma follows for the lemma 
8 . □ 

Theorem 26 (Single-qutrit exact synthesis theorem). 
Consider a 3 x 3 unitary matrix of the form U = 
1 / M where M is a 3x3 matrix over Z[a;]. Then U 

is represented exactly by a metaplectic circuit of R-count 
at most L + 3. 

In order to prove the theorem, we handle the following 
special case first: 


Lemma 27. Consider a 2x2 unitary matrix of the form 
V = l/i/^ M where M is a 2 X 2 matrix over Eisen- 

stein integers. The 3x3 matrix U = ^ J ^ can he 

effectively reduced to identity by application of at most 
two P gates and at most one classical gate. 

Proof. (Of the lemma.) Let l/\/—3^ [0, u, v]^ be the sec¬ 
ond column of the matrix U. As per lemma 25 the column 
can be reduced to a standard basis vector using at most 
one P gate. Applying an appropriate classical gates if 
necessary we can force it to be |1) and thus U gets re¬ 
duced to diag(\,l,(p) where ip G Ifpj] \s a, phase factor 
and thus an Eisenstein unit. Hence p = {—uP'Y^d G Z 
and Pf‘^ ® completes the reduction of the matrix to 
identity. 

□ 

Proof. (Of the theorem.) 

As per lemma 7 we can effectively find a unitary circuit 
Cl of i?-count at most L -b 1 and i7-count at most L that 
reduces the first column of 17 to a basis vector and, in 
fact w.l.o.g. to jo). 

Consider the matrix ci U. Due to unitariness, it must 

be of the form ^ q y ^ ^ Afi where 

Ml is a certain 2x2 matrix over Z[a;]. 

As per lemma 27 this matrix can be effectively reduced 
to identity at the cost of at most two P gates. 

Therefore we have effectively found a circuit C 2 with 
i?-count at most L -b 3 and 77-count at most L such that 
C 2 U = I and thus U = cf^. 

□ 


Appendix B: Single-Qutrit State approximation 
1. Norm equation in Eisenstein integers 

The ring of the Eisenstein integers Z[a;] is arguably the 
simplest cyclotomic ring ([22]). 

In what follows we would need certain properties of the 
equation 

jzp = n, n G Z, z G Z[uj] (Bl) 

The two basic facts to deal with are: (a) the equation 
(Bl) is solvable with respect to z only for some of the 
right hand side values; (b) the complexity of solving the 
equation for z is no less than the complexity of factoring 
the integer n. 

The first thing to note is that jzp is multiplicative in 
z. Therefore if jzip = ni and |z 2 p = n 2 then |zi Z 2 p = 
nin 2 . Hence disregarding the integer factorization we 
only need to know the effective solvability of the equation 
when n is a power of a prime number. Moreover, since 
for p G Z, jpp = i.e. the equation is always solvable 
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when n is a complete square, we only need the effective 
solvability when n is a prime number. 

According to [22], if n is a positive prime number, the 
equation (Bl) is solvable if and only if n = 1 mod 3 or 
n = 3. 

In case of n = 3 the six solutions of the equation are 
(-a;)2^(2a; + l), d = 0,...,5. 

In the more general case when n is a prime with n = 
1 mod 3 it is easy to obtain all the solutions of (BI) 
at a runtime cost that is probabilistically polynomial in 
log{n). 

Here is the two step procedure to be used: 

1) Compute m S Z such that rri^ = —3 mod n , using, 
for example, Tonelli-Shanks algorithm [20]. 

2) Compute z = GCDiy^^{m + 2uj + l,n) 

3) Now z, z*, d = 0,... 5} are the so¬ 

lutions of (Bl). 

As a matter of principle we could limit ourself only to 
norm equations with integer prime right hand sides and 
thus sidestep the need for integer factorization. 

If we pick an integer n at random from some interval 
(5/2, B), then the probability that n is an integer prime 
with n = I mod 3 is going to be in H(I/log(5)) (cf. 
[ 10 ]). 

While it is sufficient for establishing asymptotic prop¬ 
erties of the algorithms we are abont to design, for im¬ 
proved practical performance it is beneficial to be able 
to deal with easily solvable equations of the form (Bl), 
that is the ones where the integer n on the right hand 
side can be factored at some acceptable cost. A subset 
of solutions of the equation in this case is described by 
the following 

Theorem 28. Let n he an integer, factored to the form 
n = mf Pi • ■ - pi , where m G Z and pi .. .pi are distinct 
positive integer primes. 

Then 

1) The equation (Bl) is solvable if and only if Pj = 1 
mod 3,j = 

2) If {zi,..., Zf} is a sequence of partieular solutions 
of the equations |zjp = Pj, j = 1, ■ ■ ■ ,£ then all of the 
following are solutions of the equation (Bl): 

z = m Conj‘^^ [zi] • • • Conj'^‘ [zi] , d G {0,1}^ (B2) 

where Conj is the complex conjugation operator. 

Recall that an integer is smooth if it does not have 
prime factors above certain size [9]. Let us call an integer 
semi-smooth if it is a product of a smooth integer and at 
most one larger prime number. 

In view of the theorem and the above effective pro¬ 
cedure for solving a norm equation with a prime right 
hand side, solving a norm equation with semi-smooth 
right hand side n is easy and can be effectively performed 
at the runtime cost that is polynomial in log(n). 

The distribution of smooth integers is described by the 
de Bruijn function [9]. Even though the density of semi¬ 


smooth numbers n for which the equation (BI) is solvable 
in interval (5/2,5), may still be in H(l/ log(5)) asymp¬ 
totically, in practice such integers are much more dense 
than the primes with n = 1 mod 3. 

Intuitively, in a random stream of norm equations eas¬ 
ily solvable norm equations are not uncommon, and for 
large enough 5 > 0 we need to sample some 0(log(5)) 
integers n G (5/2, 5) to find, with sufficiently high prob¬ 
ability, one that is semi-smooth and such that the equa¬ 
tion (Bl) is solvable. 

Approximation methods developed in the next subsec¬ 
tion depend on the following more specific 

Conjecture 29. Let k be an arbitrarily large positive 
integer and let u,v € Z[a;] be randomly picked Eisenstein 
integers such that 

0(3^/2)<|y|2^|^|2<3fc^ 

Then for n = 3^ — jup — ^ the equation (Bl) is easily 

solvable with probability that has uniform lower bound in 

n{i/k). 


2. Approximation of single-qutrit states 

We start with the following 

Lemma 30. Let \^f) be a unitary state of the form 
a: |0) -I- 2 /11), x,y G C, |xp -I- |yp = 1 and let e be small 
enough positive value, the unitary state lip) can be ap¬ 
proximated to precision e by a unitary state for the form 
(m |0) -I- u |1) -I- w |2))/-\/—3^, u,v,w G Z[a;], fc G Z such 
that k < 4 log 3 (l/e) -I- 0(log(log(l/e))). The expected 
classical runtime required to do the approximation effec¬ 
tively is polynomial in log(l/e). 

Before proving the lemma, let us make the following 

Proposition 31. For a given complex number z with 
|z| < 1 and small enough e > 0 there exists an integer 
k < 2 log 3 (l/£) -I- 5 and an Eisensten integer u G Z[a;] 

such that \u/\E^ — z\ < e and \u/\/—?> | < |z|. 

Set ko = \2 log 3 (l/e) -1- 2 log3(2) -I- 2] and let i be a 
non-negative integer that can be arbitrarily large. For 
k = ko -\- £ there are 12(3^) distinct choices of Eisensten 
integer u such that \u/\G^ — z\ < e 

Proof. Note that \u/y/^^ — z\ = |u/-\/3^ — zi^|, and we 
can simplify the statement a bit by relabeling zi^ as z. 

We start by taking a geometric view on the feasibility 
of both claims in this proposition. 

On the complex plain Eisenstein integers are found at 
the nodes of a hexagonal lattice spanned, for example, 
by 1 and H-w = -1-1/2-I-* •\/3/2. These two lattice basis 
vectors are at the angle tt/S (and thus the entire lattice 
is a tiling of the plane with equilateral triangles of side 
length 1, see Figure 4). A circle of radius R centered 
at the origin contains at least 3 5(5-1- 1) nodes of this 
lattice. As per general properties of integral lattices, a 
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6J+ 1 w + 2 (j + 3 <i; + 4 
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• • • • 

—- 4 -w - 3 -u-2 -fj—1 


• 1 • 

-iij i -h) 2-w 3-tt> 


>-5-2<j-4-2w-3-2tJ-:-2tJ-1 -2iJ \-2u 2-2u 3 


-3 <i> - 5-3a^ - 4-3 w - 3-3 - 2-3tc/- 1 -36J 1-3£J 2-3 w 


6—46J — 5—4tJ—4—4tJ— ;—4tJ — 2—lfj-1 -4tj 1—4fj 2- 
I 


Figure 4: Lattice of Eisenstein integers. **■ 

^ Downloaded from 

http://mathworld.wolfram.com/EisensteinInteger.html, a 
Wolfram Research Inc. web resource. 


convex domain with large enough area A is to contain 

0{A) lattice nodes and, in this case, at least Zj-K A nodes. 

. _ ^ 

Desired Eisenstein integer u must be within e v3 from 

. _ ^ 

0 V3 and satisfy the side condition 

|u| < l^l 'jt (B3) 

Geometrically this means that u must belong to the 

/—k 

intersection of the two circles B{k,s) = {|m| < \z\ v3 }n 
\u — Z < £ V^^\. 

B{k,e) is a convex domain and, when e is sufficiently 
smaller than |z| it contains a sector of the smaller circle 
with the area of at least 1/2 (1 — £/\z\)e'^ 3^. Thus (as¬ 
suming £ < 2/3 |z|) if k is larger than k = log3(2/£^) -|- 1 
then the area of B{k, £) is greater than 1 and B{k) has a 
good chance of containing at least one node of the Eisen¬ 
stein lattice. It may not contain one for a specific geo¬ 
metric configuration, but one notes that for k = k + i the 
area of B{k,£) grows exponentially in £ so there exists a 
small constant Iq such that for ko = +£o the B{ko,£) 

contains an Eisenstein lattice node. It is geometrically 
obvious that from that point on for integer £ > 0 the 
number of Eisenstein lattice points in B{ko -|- £, e) grows 
as 0(3^). 

We now propose a procedure for effectively finding such 
points in B{k, e) . 

The task is reduced to the case when 7r/I2 < argz < 


5 7 r/I 2 . Indeed, the multiplication by the Eisensten unit 
—= 1 -|- a; is interpreted as a central rotation of the 
complex plane by the angle 7 r /3 and an automorphism of 
the Eisenstein integer lattice. A complex number z ^ 0 
lying in any of the six sectors 7r/12 -|- Trlim < a.igz < 
5 7 r/I 2 -|- 7 r/ 3 TO, to = 0,..., 5 can be moved into the sector 
7 r /12 < argz < 5 7 r/I 2 by applying zero or more of such 
rotations. An Eisenstein integer properly approximating 
the rotated target can be rotated back into an Eisenstein 
integer approximating the original target. 

We now assume, that k > log^(2/£) + 2 = 

2 log 3 (l/£) -I- 2 log 3 ( 2 ) -I- 2 (this is a convenient even if 
somewhat excessive assumption). 

This implies that e ^ > 2 and £ > 6 . 

Considering 7 r /12 < argz < 5 7 r/ 12 , the 

circle (B3) contains the vertical segment 

[z-\/3^ — i \z\\/i^{2 sin( 7 r/ 12 )), z-s/S^] of length at least 
l/2|z|-\/3 . Assuming, again, £ < \z\ the B{k,e/A) con- 
tains the vertical segment E = [z V3 —iv3 £/4, zv3 ]. 

We are now ready to build the desired Eisenstein inte¬ 
ger u = a + hu) = {a — 6/2) -|- i (6-\/3/2), a,b G Z. We are 

going to chose 6 such that 6 •\/3/2 is at a distance at most 
_^ ^ 

(£/4)v 3 from Im(z) V3 . As per our choice of k this 
implies that it is necessary and sufficient for the integer 
b to belong to a segment of length e /2 > -x/S > 1 . 

Therefore at least one such integer exists and can be ef¬ 
fectively picked. 

Next one must hnd an integer a such that u = a — 
(6/2) -I- i {b^/3/2) e B{k,e). As per the geometric con¬ 
dition argz < 5 7 r/ 12 , the circle (B3) contains horizontal 

segment H = [z — |z|-\/3^ sin( 7 r/ 12 ), z of length 

. _ ^ 

at least l/4|z|v3 and under £ < |z| the B{k,e) con¬ 
tains horizontal segment H' = [z\/3 — £-\/3 /4, z-\/3 ]. 
By elementary geometric considerations B(k,e) also con¬ 
tains the horizontal segment H" = [z-\/3^ — i6-\/3/2 — 
3/16 £ -s/S^, z —iby/3/2] of length at least 3/16 £ -s/S^. 

For our choice of fc, 3/16£-\/3^ > 3/16 x 6 > 1. It is 
necessary and sufficient for the desired integer a to belong 

to the segment [Re(z) -^^^-1-6/2—3/16£ Re(z) 

6 / 2 ] of length greater than 1 as we have just seen so the 
desired a exists and can be effectively picked. 

The geometry of this approximation procedure is 
shown schematically on Figure 5. 

Set fco = [2 log 3 (l/£) + 2 log 3 ( 2 ) -|- 2]. Let £ be some 
positive integer. Since the geometry of the problem for 
k = ko+£ is simply the geometry of the problem aik = k^ 
scaled out by the factor of -x/S then the segments we used 
above to pick the values of 6 and a are scaled out by a 
factor of D(-\/3 ) and thus allow at least fl(-\/3 ) distinct 

choices of 6 and at least fl(-\/3 ) distinct choices of a 
for each choice of 6 . Therefore there are D(3^) distinct 
choices of Eisenstein integer u yielding as many distinct 
approximations of z as claimed. 
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Figure 5: Approximating a scaled complex number by 
an Eisenstein integer. 


□ 


Proof. (Of the lemma) 

For convenience we assume that e < 1. 

Let us do some preliminary analysis first. 

We start by observing that for a unitary state \ip) to 
be within e of |'0) , it would suffice that 

2Ke{{ip\if)) > 2 - (B4) 

Consider some small <5 > 0 and a tri-level unitary state 
|(p) = u' |0) -f u' |1) -I- w' \2) and assume that \u’ — a;| < 

By direct computation 

2Re(u' X*) > \u'\'^ + \x\^ — 

2 Re(v' y*) > + \y\'^ — (5^ 

Hence 2Re(((/?|'0)) > 2 — (1 — \u'\'^ — |u'p) — 2 5"^. 

Expanding triangle inequalities |it'| > |a;| — |x — 

m'I, k'l > lyl-ly-i^'l, weget > l-2(|a;| \x- 

+ \y\ \y ~ + \y — > i — 45. 

Assuming w.l.o.g that 5^ < 5/2 we conclude that 
2Re{{ip\^)) >2-55. 

Set 5 = e^/5 in order to satisfy the inequality (B4) 
and start with fco = [2 log3(l/5) + 2 log3(2) -I- 2] < 
4 log 3 (l/e) + log3(5) + 5. 

We will look for a sufficient k = ko+£ where £ iterates 
sequentially through non-negative integers. 

As per the Proposition 31 there exist several suit- 
able Eisenstein integers u,v such that u/^/—3 is an 5- 
approximation of x and u/y—3 is a 5-approximation of 
y. In fact as £ grows, there are 12(9^) distinct subunitary 
states u/\/^ |0) + u/v^ |1) that are 5-close to \il)). 


To effectively prove the lemma it suffices to find one 
such state that can be completed to a unitary state \ip) = 
+ + wl'/^^\ 2 ) for some £ that is 

not too large. 

The sufficient inequality (B4) does not explicitly in¬ 
volve w and is satisfied for 5 = e^/5 as shown above. 

By unitariness of the desired \(p), the w G Z[a;] must 
satisfy the equation 


|l(;|2 = 3'= _ |m|2 _ |^|2 (-25) 

which is an instance of the norm equation (Bl). As we 
have seen in the subsection B 1, any particular instance 
of the norm equation is not necessarily solvable. However 
we are going to randomize the choice of u and v so that 
the Conjecture 29 becomes applicable. 

To this end, let £ be an integer iterating from 0 to some 
sufficiently large L and k = ko+£ iterate with it. For each 
subsequent value of £ we will inspect all the available u, v 
that generate 5-approximations u/v—3 ,v/\/—3 ofx,y. 
As we have pointed out the number of such distinct u, v 
grows exponentially with £. Assuming Conjecture 29 we 
only need to inspect as many as 0(log(3^ — |up — |up)) = 
0 {k) = 0{kQ+£) of such distinct u, v to find one for which 
the equation (B5) is easily solvable with sufficiently high 
probability. 

It is easy to see that there exists such £ = O(log(fco)) 
for which an easily solvable norm equation (B5) is ob¬ 
tained with near certainty. Therefore a desired unitary 

. _ ^ 

state {u |0)-|-u |l)-|-w |2))/v—3 will be obtained for some 
k = ko + O(log(fco)) < 4 log 3 (I/e) -b 0(log(log(l/e))) 

Finally we note that we only needed to inspect 0{k) = 
0(log(l/e)) candidate pairs u,v for completion. Each 
inspection involved a decision whether the correspond¬ 
ing norm equation was easily solvable which incurred ex¬ 
pected runtime cost that was polynomial in 0(log(3^)) = 
0{k) = 0(log(l/£)), Therefore the overall expected 
runtime cost of the algorithm is also polynomial in 
0(log(I/e)). 

□ 


Below we present the method suggested by this lemma 
in pseudo-code format 
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Algorithm 3 Approximation of a short state 

Require: x,y gC; \x\^ + |?/p = 1; e > 0 
1 : 5 e^/5 

2 : fco ^ [4 log 3 (l/e) + log 3 ( 5 ) + 5J 
3: w G- None; fc ^ fco — 1 
4: while w = None do 
5: k i — /c + 1 

6 : enum ^ enumerator for all u,v G Z[a;] 

7: s.t. (u|0) + u|l))/-v/^^ is (5-close to a:|0) + y|l) 

8: while w = None A enum.Next do 

9: {u^v) G- enum.Current 

10 : if Equation \z\'^ = 3^ — |up — |up is easily 

solvable for z then 
11 : w z 

12: end if 

13: end while 

14: end while 
15: return {u,v,w,k} 


GL( 2 ,F 3 ) k F§ be the affine linear group acting on the 
2-dimensional vector space F§. Explicitly, given (p = 
{A, c) G AGL(2, F 3 ), u e F|, we have ‘p{v) = Av+c. Note 
that Fg has in total 9 vectors, whose coordinates under 
the standard basis are = 0,1,2}. We identify 

the coordinate (i, j) with the 2 -qutrit basis vector \i,j). 
Since elements of AGL( 2 ,F 3 ) permute the 9 coordinates, 
we then have a group morphism ?/> : AGL(2, F 3 ) — > Sg C 

C/(3^), such that ip(A,c)\i,j) = + c. 

For instance, let A = , since A. ^ ^ , 

then '0(A) = SUM. Similarly, once can check the follow¬ 
ing correspondences. 

(^1 SUM 

SWAPS 


Appendix C: Two-qutrit classical gates generated by 
SUM and SWAP 

It is currently not known what two-qutrit gates can be 
represented exactly over the metaplectic basis. In par¬ 
ticular it is not known whether the important classical 
G^(INC) gate (4) is so representable. 

Let Sg be the permutation group on 9 elements. There 
is a natural unitary representation of Sg on C®* where a 
permutation tt is mapped to the unitary that extends 
the permutation tt applied to the standard basis vectors 
{|00),..., 122)}. The image of this faithful representation 
coincides, by definition, with the group of all the classical 
two-qutrit gates. By a slight abuse of notation we also 
use Sg to denote the image. 

The following proposition addresses the maximality of 
the subgroup of 2 -qutrit classical gates obtained from 
braiding. 

Proposition 32. The group, G, generated by 
SUM, SWAP, and all the 1-qutrit classical gates is 
a maximal subgroup of Sg. 

Proof. Of-course, one can always do a brute force com¬ 
puter search to verify this statement. Here we pro¬ 
vide an elegant alternative proof. Let AGL( 2 ,F 3 ) = 


/l 0 0 

Id Sip, where 51,2 = ( 0 0 1 

\0 1 0 


INC (g) Id 


^ Id (g) INC 

It’s easy to check that the matrices(vectors) on the 
LHS of the above correspondences generate the group 
AGL( 2 ,F 3 ) and the gates on the RHS generate G. Also, 
it’s not hard to verify that the map 0 is injective and 
thus G ~ AGL( 2 ,F 3 ). Now by O'Nan-Scott Theorem 
[19][14], AGL( 2 ,F 3 ) is a maximal subgroup of Sg. 
Therefore G is a maximal subgroup of C C/(3^). □ 





An immediate consequence of this proposition is that, 
as soon as the G^(INC) gate is exactly representable then 
all the classical two-qutrit gates are also exactly repre¬ 
sentable. 







